Static task
static1
Behavioral task
behavioral1
Sample
06587262a94f9d291449a0695c682df4_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
06587262a94f9d291449a0695c682df4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
06587262a94f9d291449a0695c682df4_JaffaCakes118
-
Size
244KB
-
MD5
06587262a94f9d291449a0695c682df4
-
SHA1
2135fa72a3aa7f87604fe9387eb507e4549a87e6
-
SHA256
5a3fa2acd4302b05cbd6c327de4e80de9da237cc379cc0654a5c08f4f9f98611
-
SHA512
4900990c6f3f1bb0f73ee6acc8c18f9861e9fe6c4cc294703b1e71801f328f2ed3476d0f4d1a1891be2c381c78c95e8d5ae43b2ff6fbf4d56fc200d84d7ac69c
-
SSDEEP
6144:Ba/PIW9iTpuOR0Roh5ZSuE+H2uZwjAuhmfVRqCb:0/DimuE+HHZw2/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06587262a94f9d291449a0695c682df4_JaffaCakes118
Files
-
06587262a94f9d291449a0695c682df4_JaffaCakes118.exe windows:4 windows x86 arch:x86
e30273c6249091f92a0b9dfca6c72073
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
user32
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
FindWindowA
kernel32
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
InterlockedExchange
RtlUnwind
GetLocaleInfoA
SetStdHandle
SetFilePointer
HeapSize
GetCPInfo
GetOEMCP
GetACP
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualFree
HeapCreate
ReadFile
SetConsoleMode
GetConsoleMode
GetStdHandle
WriteFile
GetSystemTimeAdjustment
GetSystemTime
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
FindClose
FindNextFileA
FindFirstFileA
GetWindowsDirectoryA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetCurrentThreadId
WaitForSingleObject
SetEvent
CreateThread
GetFileType
CreateEventA
GetVersionExA
GetProcAddress
LoadLibraryA
FreeLibrary
GetEnvironmentVariableA
CreateFileA
GetModuleFileNameA
ExitProcess
GetModuleHandleA
TerminateProcess
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
HeapFree
GetLastError
GetCommandLineA
FlushFileBuffers
SetHandleCount
GetStartupInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
GetTimeZoneInformation
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
HeapDestroy
Sections
.text Size: 176KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jgd Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE